@taruvi/sdk 1.4.8 → 1.5.0

package/.github/workflows/publish.yml

@@ -4,6 +4,9 @@ on:
   push:
     branches: [main, beta]
 
+permissions:
+  contents: write
+
 jobs:
   publish:
     runs-on: ubuntu-latest
@@ -48,8 +51,8 @@ jobs:
           git tag "v${{ steps.version_check.outputs.current_version }}"
           git push origin "v${{ steps.version_check.outputs.current_version }}"
 
-      - name: Publish (beta)
+      - name: Publish
         if: steps.version_check.outputs.changed == 'true'
-        run: npm publish --access public --tag beta
+        run: npm publish --access public
         env:
           NODE_AUTH_TOKEN: ${{ env.NPM_TOKEN }}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@taruvi/sdk",
-  "version": "1.4.8",
+  "version": "1.5.0",
   "description": "Taruvi SDK",
   "main": "src/index.ts",
   "type": "module",

package/src/lib/auth/AuthClient.ts

@@ -1,6 +1,7 @@
 import type { Client } from "../../client.js";
 import type { TaruviResponse } from "../../types.js";
 import type { UserData } from "../users/types.js";
+import { AuthRoutes } from "../../lib-internal/routes/AuthRoutes.js";
 import { UserRoutes } from "../../lib-internal/routes/UserRoutes.js";
 
 /**
@@ -94,12 +95,33 @@ export class Auth {
     }
 
     /**
-     * Check if user is authenticated (has session token)
+     * Check if a session token exists locally (does not validate with server)
      */
-    isUserAuthenticated(): boolean {
+    hasToken(): boolean {
         return this.client.tokenClient.isAuthenticated()
     }
 
+    /**
+     * Check if user is authenticated by validating session with the server
+     */
+    async isUserAuthenticated(): Promise<boolean> {
+        if (!this.hasToken()) return false
+        try {
+            await this.validateSession()
+            return true
+        } catch {
+            return false
+        }
+    }
+
+    /**
+     * Validate current session token with auth session endpoint.
+     * HttpClient injects X-Session-Token automatically.
+     */
+    async validateSession(): Promise<void> {
+        await this.client.httpClient.get(AuthRoutes.session())
+    }
+
     /**
      * Get the current session token
      */
@@ -112,7 +134,7 @@ export class Auth {
      * @returns Promise with user data or null if not authenticated
      */
     async getCurrentUser(): Promise<TaruviResponse<UserData> | null> {
-        if (!this.isUserAuthenticated()) {
+        if (!this.hasToken()) {
             return null
         }
 

package/src/lib-internal/routes/AuthRoutes.ts

@@ -0,0 +1,3 @@
+export const AuthRoutes = {
+    session: () => "_allauth/app/v1/auth/session"
+} as const

package/.claude/settings.local.json

@@ -1,19 +0,0 @@
-{
-  "permissions": {
-    "allow": [
-      "Bash(tree:*)",
-      "Bash(npm run build:*)",
-      "Bash(npm ls:*)",
-      "Bash(npm link:*)",
-      "Bash(npx --yes markdownlint-cli:*)",
-      "Bash(cat:*)",
-      "Bash(test:*)",
-      "Bash(ls:*)",
-      "WebFetch(domain:www.markdownpaste.com)",
-      "WebSearch",
-      "WebFetch(domain:supabase.com)"
-    ],
-    "deny": [],
-    "ask": []
-  }
-}